
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ca97d9b-a438-372e-b68d-15d01ed5ddc4.roa
File: 4ca97d9b-a438-372e-b68d-15d01ed5ddc4.roa (raw, json)
Hash identifier: Ghj4X4wCM+I6JimB/onuUMq4LYnUDPZa6NfIejxb/lU=
Subject key identifier: 47:3E:84:CA:70:0F:BD:FF:0C:AA:7A:BD:67:43:C6:B0:D4:62:A5:5A
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F4328584F4988F30EE1E2E12E6054EC80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ca97d9b-a438-372e-b68d-15d01ed5ddc4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 2604:2e8b:2800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:f3:0e:e1:e2:e1:2e:60:54:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=bd6c5528-9bb6-475a-b683-2e98d1400dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:d7:aa:c7:66:bf:eb:e3:39:d2:3e:41:a0:
7b:7a:40:5e:3b:ae:b8:45:bb:a1:40:6a:fe:a2:4f:
a1:5e:59:8c:75:25:2d:6c:b6:3e:e1:16:03:97:93:
15:2c:56:b7:a7:0b:8c:08:d9:a7:96:16:34:06:f3:
22:00:ad:14:d1:12:ff:96:31:fc:e6:bd:a7:66:64:
7c:17:3b:ae:b3:24:4a:8f:2c:19:4f:26:6e:8b:c5:
01:1b:7e:e3:af:73:09:6c:36:b0:52:ed:71:bf:45:
7b:73:94:a8:50:a5:79:91:75:59:82:bd:82:d5:e6:
70:40:27:f5:38:62:60:27:ad:c6:f2:f1:b9:7a:1f:
e7:4f:54:92:2e:f6:28:ef:bc:bf:e4:34:33:87:7a:
c0:54:45:ba:f1:19:5e:7c:b9:67:69:59:bc:00:e1:
72:53:f7:d4:24:82:e0:45:48:90:4d:3c:ed:35:82:
38:d9:69:9b:a7:2c:93:d8:13:71:6a:46:3b:62:f2:
4f:e6:b8:7a:21:7b:ee:68:ce:da:75:4f:27:c4:5a:
3a:93:2e:63:19:82:93:8c:03:95:4a:85:20:c2:71:
fa:cf:58:78:e8:12:f0:a3:5e:05:bf:cd:0e:d5:ee:
d1:15:5c:d0:01:85:a3:30:c6:87:d5:52:e8:85:73:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:84:CA:70:0F:BD:FF:0C:AA:7A:BD:67:43:C6:B0:D4:62:A5:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4ca97d9b-a438-372e-b68d-15d01ed5ddc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2e8b:2800::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:f1:b3:48:2c:4f:3a:e1:41:44:7d:3c:d0:b8:d8:52:c2:34:
c6:69:bb:4b:73:45:15:4d:45:d6:6c:f7:56:b8:c0:18:c9:16:
48:24:dd:c5:3f:ff:84:ba:aa:5d:0c:24:ce:0f:64:3e:0d:68:
53:ba:35:f9:ca:25:ed:28:a4:33:57:6f:f1:8d:7d:2f:09:7d:
c7:97:ea:ee:ac:ed:45:61:97:57:42:8a:1c:c1:5a:53:81:71:
ac:f5:8d:f4:a1:1c:e8:73:0c:d0:9a:3b:ca:f9:57:20:35:15:
bd:a6:60:69:ac:b2:fc:b2:b6:2a:de:aa:e7:15:b0:75:56:b3:
f7:af:f0:72:0b:98:89:61:d7:00:a4:8b:c3:ee:8a:ff:94:03:
19:5c:29:11:5e:8f:da:f6:96:c8:53:8b:b4:81:30:27:da:2f:
85:1a:a8:7b:71:b8:0b:61:ac:fd:2f:3d:9e:ca:9b:cf:ba:a6:
22:98:49:14:21:8a:41:13:ce:3b:88:74:cc:cd:8c:b5:1c:31:
fa:26:6a:47:d2:86:53:ea:5a:7b:3c:b6:a4:f2:d1:7f:4c:63:
28:16:4f:e9:b5:0e:6c:da:86:e2:d2:3c:48:94:fa:92:7b:ab:
b9:da:a8:d6:d5:7b:3b:f8:6b:e5:86:fc:e7:7e:67:f6:6f:bb:
8c:6f:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:35:10 2026 by rpki-client